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1 INTRODUCTION 

Since  the  conception  and  implementation  of  the  control  system  for  the  pilot-scale  research 
incinerator  at  the  Alberta  Environmental  Centre  (AEC),  many  people  involved  in  the  initial  effort 
have  left  the  Centre.  Many  subsequent  additions  and  changes  to  the  system  were  performed  by 
contract  or  other  temporary  staff.  As  a result,  details  of  the  design  on  the  operational  level  is 
fragmented.  This  report  describes  the  incinerator  control  system  and  creates  a basis  for  further 
work  to  improve  the  quality  and  reliability  of  controls. 

2 INCINERATOR  DESCRIPTION 

The  Incinerator  Research  Building  (IRB)  at  AEC  is  a facility  hosting  a comprehensive 
system  to  study  all  aspects  of  incineration  processes.  Main  components  of  this  system  are: 

• bench  scale  incinerator,  fully  instrumented  with  complete  set  of  analytical 
instrumentation, 

• pilot  scale  incinerator, 

• preparation  laboratories. 

The  IRB  facility  is  complemented  by  other  laboratories  at  the  Centre  that  make  it  not  only 
possible  to  study  the  details  of  the  incineration  processes,  but  also  the  impact  of  various 
incineration  products  on  the  environment. 

The  major  process  components  of  the  Pilot  Scale  Incinerator  are:  the  Incinerator 

comprising  of  four  combustion  chambers,  followed  by  a Venturi  and  Packed  Column  Scrubbers, 
Carbon  Adsorber,  and  Exhaust  Reheater  unit.  Figure  1 provides  a layout  of  the  Process  and 
Auxiliary  Equipment  for  the  pilot-scale  incinerator  system.  These  process  units  are  controlled 
by  the  AEC  Pilot-Scale  Incinerator  Control  System.  The  main  functions  of  the  Incinerator 
Control  System  (ICS)  is  to  ensure  the  safe  operation  of  the  process  devices;  maintain 
temperatures,  oxygen  levels  and  pressures  in  combustion  chambers  and  other  units;  and  protect 
devices  and  operating  personnel  through  alarming  and  safety  interlocks.  Regulation  of  various 
process  parameters  is  performed  by  17  control  loops  of  Programmable  Logic  Controllers  (PLCs). 
Operator  Interface  to  the  control  function  is  provided  by  the  ONSPEC™  package.  It  allows 
recording  of  process  information,  viewing  of  trends  and  alarms,  and  operating  devices  using 
computer  screens.  The  purpose  of  this  report  is  to  provide  the  reader  with  more  detailed 
information  on  the  Incineration  Control  System. 
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3 APPROACH 

The  design  philosophy  of  the  system  was  based  on  meeting  the  following  functional 
requirements: 

• flexible  data  presentation,  archiving  and  retrieval; 

• proportional  and  discrete  logic  controls;  and 

• safety  interlocks  and  alarming. 

Hardware  selection  criteria  included: 

• structural  and  functional  flexibility;  and 

• cost  effectiveness. 

To  achieve  these  objectives,  a design  based  on  the  combination  of  PLC  controls  and  IBM- 
PC  based  operator  interface  software  was  chosen.  Commercially  available  PLCs  provide  the 
required  structural  and  functional  flexibility  through  programmability  using  advanced  software 
ladder  diagram  programs.  These  programs  also  allow  checking  and  debugging  through 
monitoring  and  simulating  of  different  system  conditions.  Built-in  documentation  facilities  make 
maintenance  and  modification  easy  to  perform.  PLC  hardware  and  firmware  offer  a very  high 
level  of  operational  reliability;  at  the  same  time,  they  are  very  cost  effective.  The  Westinghouse 
PLC  model,  PC-900,  meets  both  functional  and  cost  requirements. 

IBM-PC  based  operator  interface  software  complements  the  relay  logic.  It  achieves  the 
required  level  of  sophistication,  functionality  and  cost  effectiveness.  The  IBM-PC  compatible 
hardware  platform  that  runs  the  software  offers  high  performance  at  low  cost.  The  DOS 
operating  environment  is  simple  and  user  friendly.  There  is  a wide  range  of  software  products 
available  for  data  post-processing,  graphing,  etc.  Staff  are  familiar  with  DOS  along  with  many 
general  purpose  application  programs  such  as  Lotus,  and  D Base.  We  have  selected  ONSPEC™ 
control  software  from  Heuristics  as  a package  best  suited  for  our  application. 

ONSPEC™  runs  under  the  Digital  Research  Concurrent  DOS  operating  system. 
Concurrent  DOS  fills  the  multitasking  deficiency  gap  of  MS  DOS  and  allows  operators  to  run 
many  custom  programs  concurrently  with  the  ONSPEC™  control  package.  These  programs  may 
be  required  to  aid  the  operator  in  data  analysis.  One  such  package  is  the  "Super  Trend"  trending 
software  and  another  is  the  on-line  "SuperCalc"  spread  sheet,  both  from  Heruistics.  ONSPEC™ 
provides  the  designer  with  ready-made  controller  face-plates  and  many  graphic  symbols  to  build 
control  displays.  The  advanced  controls  module  makes  more  advanced  algorithms,  such  as  feed- 
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forward,  readily  available  to  an  application  (i.e.  without  the  need  to  write  programs). 
Configuration  of  controls  and  displays  is  performed  by  filling  in  blanks  on  screen  templates.  To 
provide  flexible  access  to  data  and  displays  and  control  manipulation  by  both  the  operator  and 
scientists  involved  in  the  incinerator  run,  three  AT  compatible,  80386  microprocessor  based 
computers  are  linked  in  a network  configuration,  which  allows  sharing  of  both  files  and  the 
ONSPEC™  on-line  control  data  base. 

For  data  logging  of  less  critical  and  slowly  varying  signals,  an  available  analog  device, 
a MACSYM^™^  laboratory  data  logger  was  used  in  conjunction  with  the  Scanivalve  - an  electro- 
mechanical multiplexer. 

Scanivalve  offers  a cost  effective  solution  to  pneumatic  signals.  The  cost  of  one  channel 
of  a Validyne  pneumatic  transducer  is  approximately  $1000.00,  while  for  around  $2000.00,  a 
Scanivalve  unit  provides  12  pneumatic  channels  per  rotor.  Additional  rotors  carrying  12  channels 
cost  $600  each.  In  addition,  the  unit  supports  multiplexing  of  low  level  signals  from 
thermocouples.  Non-critical  analog  signals  are  mostly  wired  directly  to  the  Macsym  data  logger. 
Signals  required  for  controls  are  wired  directly  to  the  PLC  cards.  The  Macsym  based  data 
acquisitions  system  was  operational  for  a few  years  until  it  was  damaged  by  a water  leak.  A 
Texas  Instruments  PLC  model  545  has  replaced  it.  The  TI  system  provided  the  capabilities  of 
the  original  Macsym  data  acquisition  system  and  also  offered  expansion  capacity  needed  for 
future  control  applications.  A block  diagram  of  the  control  hardware  is  shown  in  Figure  2. 

4 CONTROL  LOOPS 

Control  loops  are  implemented  in  the  Westinghouse  PLC.  The  following  types  of  control 
loops  are  utilized; 

• Flow; 

• Air/fuel  ratio; 

• Temperature; 

• Pressure  and  differential  pressure;  and 

• pH. 

The  typical  control  loop  uses  the  general  PID  algorithm  available  on  the  PLC.  Algorithm 
parameters  are  entered  into  the  PLC  using  specially  designed  screens  from  ONSPEC™. 
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Depending  on  loop  requirements,  sometimes  only  proportional  (P)  or  proportional  and  integral 
(PI)  sections  are  used. 


INCINERATOR  SIGNAL  SENSORS.  TRANSMITTERS  AND  FINAL  ELEMENTS 


PARALLEL 


Figure  2 System  Block  Diagram 


4.1  Flow  Controls 

A typical  flow  control  loop  is  shown  in  Figure  3. 

Flow  rate  is  measured  by  the  differential  pressure  at  the  orifice  or  venturi  sensing  element 
and  is  controlled  by  an  electro-mechanical  positioning  actuator  (Honeywell  Modutrol)  moving 
a valve.  The  PLC  processes  input  signals  and  PI  algorithms;  actions  are  controlled  by  varying 
the  strength  of  the  output  signals.  Actuators  inherited  from  past  designs  exhibited  substantial 
positional  hysteresis.  Instrumentation  and  Control  Section  staff  modified  the  actuators  to  decrease 
this  hysteresis  from  4.4%  to  approximately  2%.  Further  decrease  in  hysteresis  width  is  not 
possible  because  of  the  design  of  the  actuator  feedback  potentiometer.  Its  resistive  element  is 
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too  coarsely  wound  and  further  reduction  of  hysteresis  results  in  a jumpy  feedback  signal  and 
quick  deterioration  of  the  actuators  and  valves. 

However,  for  the  liquid  flow  control  loop,  this  type  of  actuator  is  not  suitable  and  was 
replaced  by  a pneumatic  control  valve.  A mass  flow-meter  is  used  to  measure  liquid  flow  rate. 

The  mechanical  linkages  of  the  air  valves  in  the  air  flow  control  loops  are  arranged  so 
that  when  completely  closed  some  air  passage  still  occurs;  this  provides  air  for  the  pilot  flame 
and  prevents  accidental  starvation  of  the  flame,  particularly  during  initial  ignition,  re-ignition  or 
during  transient  action  of  the  controller.  In  addition,  some  flame  control  loops  have  been 
designed  to  prevent  complete  closure  of  the  gas  valves  during  control  action.  This  avoids 
triggering  of  the  "flame  failed"  signal,  and  obviates  the  need  for  special  circuits  to  differentiate 
between  "flame  off  due  to  abnormal,  dangerous  conditions  and  "safe  flame  shut-down" 
conditions  resulting  from  the  controller  action. 

4.2  Ignition  Control  and  Flame  Monitoring 

The  multi-fuel  main  burner  incinerates  gas  as  well  as  liquid  waste  using  gas  or  liquid  as 
a fuel.  During  start-up,  a pilot  flame  is  ignited  first.  The  pilot  flame  is  monitored  by  a Fire 
gye(TM)  circuit.  It  is  wired  to  activate  the  ignition  coil  when  the  flame  goes  out.  If  the 

pilot  is  not  re-ignited  within  five  seconds,  the  Fire  causes  the  main  fuel  valves  to 


7 


shutdown  and  triggers  the  "Pilot  failed"  relay.  This  relay,  once  triggered,  cannot  be  reset  for  a 
few  minutes.  The  reset  has  to  be  manually  pressed  at  the  Fire  Eye  panel. 

The  main  burner  has  a double  circuit  for  flame  monitoring.  Under  some  conditions  the 
flame  may  separate  from  the  nozzle,  creating  the  possibility  of  an  explosion.  The  second  Fire 
Eye^™^  monitors  for  this  condition.  When  this  condition  is  detected,  the  safety  circuit  attempts 
to  re-ignite;  if  unsuccessful  within  five  seconds,  the  safety  circuit  will  shut  down  the  main  fuel 
valves. 

There  is  a special  switching  logic  implemented  in  the  PLC  that  can  prevent  the  "Pilot 
failed"  relay  from  triggering.  This  special  switching  circuit  lets  the  operator  re-ignite  the  pilot 
remotely  from  a computer  console.  This  circuit  is  described  in  more  detail  later  in  this  report. 
Burners  on  chambers  #2  and  #3  do  not  have  pilot  flames. 

4.3  Air/Fuel  Ratio  Control 

At  start-up,  the  air/fuel  (A/F)  ratio  is  set  to  a default  value.  Oxygen  analyzers  are  used 
to  measure  oxygen  content  and  control  the  A/F  ratio.  They  require  proper  operating  temperatures 
to  function.  During  warm-up,  the  analyzer  control  loops  are  disabled  so  the  A/F  ratio  can  be 
adjusted  manually  within  preset  safety  (high,  low)  limits.  Once  the  initial  warm-up  is  complete, 
the  oxygen  analyzer  loop  is  cascaded  to  control  A/F  ratio  based  on  the  readout  of  the  oxygen 
analyzer.  Figure  4 depicts  the  ratio  control  section  of  the  incinerator  control  system.  In  addition, 
an  anti-smoke  arrangement  using  process  lag  prevents  oxygen  deficiency  (and  generation  of 
smoke)  during  load  variation.  The  anti-smoke  circuit  is  described  in  the  next  section. 


Figure  4 


Air/Fuel  Ratio  Control 
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4.4  Temperature  Control  with  Anti-Smoke  Control  Circuit 

The  temperature  control  circuit  use  a cross-limiting  (lead-lag)  anti-smoking  arrangement. 
The  structure  of  this  circuit  is  shown  in  Figure  5. 


Figure  5 Typical  Temperature  Control  Loop 

The  PI  controller  compares  setpoint  temperature  with  the  actual  measured  temperature  and 
produces  the  "fuel  demand"  output  signal.  To  produce  a flow  setpoint  value  for  fuel  and  air 
controllers,  this  signal  is  passed  through  low  and  high  selectors.  The  low  selector  compares 
actual  fuel  flow  with  the  demand  signal  and  selects  the  lower  value  of  the  two,  thus  assuring  that 
the  A/F  ratio  does  not  fall  below  the  set  value  during  transition  from  increased  fuel  demand. 
Alternatively,  the  high  selector  compares  actual  air  flow  rate  with  the  demand  signal  and  selects 
the  larger  value,  assuring  that  the  A/F  ratio  will  not  decrease  during  transition  from  decreased 
fuel  demand.  Since  actual  flows  lag  behind  setpoint  demands,  this  circuit  increases  the  A/F  ratio 
either  when  there  is  an  increase  or  a decrease  in  the  fuel  demand,  thus  preventing  smoke  creation 
during  the  transition  period.  The  properties  of  the  circuit  are  summarized  below: 

On  increased  demand: 

• following  demand,  air  increases  first 

• fuel  follows  air,  lagging  behind  demand. 
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On  decreased  demand: 

• following  demand,  fuel  decreases  first 

• air  follows  fuel,  lagging  behind  demand. 

In  the  steady-state  condition: 

• the  air/fuel  ratio  is  in  balance 

• air  follows  the  fuel  flow  in  the  ratio  specified  by  the  oxygen  analyzer. 

In  our  installation  some  of  the  selectors  are  slightly  biased  to  cut  off  part  of  the  noise 
spikes  present  on  control  signals.  These  transition  spikes  are  generated  at  the  steady  state 
condition  because  of  the  substantial  hysteresis  of  the  Honeywell  actuators.  Biasing  improves  the 
quality  of  the  control  signals  while  maintaining  the  benefits  of  the  anti-smoking  circuit. 

4.5  Preferential  Waste  Fuel  Firing 

The  main  burner  can  bum  gas  and  liquid  at  the  same  time.  Usually  the  waste  being 
incinerated  is  liquid.  The  preferential  firing  circuit  helps  to  use  caloric  value  of  the  liquid  waste 
by  making  liquid  more  preferable  fuel  than  gas.  This  is  important  when  working  with  liquids 
which  have  high  combustion  energy  comparable  to  that  of  natural  gas.  Figure  6 illustrates  the 
stmcture  of  this  circuit. 


Figure  6 


Preferential  Waste  Fuel  Firing  Circuit 


10 


This  circuit  lets  an  operator  set  the  desired  value  of  the  liquid  waste  flow  rate.  This  set 
value  becomes  the  high  limit  for  the  waste  flow  rate.  The  low  selector  compares  demand  for  the 
fuel  with  the  set  value  and  selects  the  smaller  value.  When  the  caloric  value  of  the  liquid  is  not 
sufficient  to  maintain  the  required  temperature,  gas,  which  serves  as  the  auxiliary  fuel,  is  fired. 
When  the  caloric  value  of  the  liquid  is  high  and  the  waste  flow  rate  setpoint  is  set  too  high,  an 
excessive  rise  in  the  chamber  temperature  occurs.  Consequently,  the  low  selector  selects  the  fuel 
demand  signal  with  the  lower  value  put  out  by  the  temperature  controller  and  decreases  the  flow 
rate  of  the  waste  that  is  required  to  maintain  the  temperature  at  setpoint  level.  The  caloric  value 
of  liquid  is  subtracted  from  the  total  demand  for  fuel  and  this  difference  is  passed  to  the  gas  flow 
controller.  When  the  caloric  value  of  liquid  is  negative  the  demand  for  gas  increases  with  an 
increase  of  liquid  flow  rate.  The  coefficient  representing  the  caloric  value  of  waste  compared 
to  gas  is  entered  in  the  PLC  using  an  ONSPEC™  screen.  This  coefficient  can  be  very 
approximate,  since  the  controller  can  compensate  for  discrepancy  through  a control  action. 

4.6  Controlling  Incineration  of  Solids 

Chamber  #2  (‘solids  chamber’)  bums  solid  waste.  In  this  mode  of  operation,  the 
guillotine  door  closes  and  separates  chamber  1 from  chamber  2.  It  is  more  difficult  controlling 
the  incineration  of  solids  than  liquids.  Three  elements  achieve  control: 

1.  A gas  burner,  with  its  combustion  air  supply,  initially  heats  the  chamber  and 
maintains  temperature  at  a preset  value  set  above  the  ignition  level  for  solids 
waste. 

2.  "Under-fire  air"  controls  the  combustion  rate  by  controlling  the  amount  of 
available  oxygen. 

3.  Steam  quenches  the  fire  when  it  is  out  of  control. 

Figure  7 illustrates  the  control  structure  for  the  solid  waste  combustion  chamber.  During 
normal  operation  chamber  #2  is  expected  to  bum  solids  with  an  oxygen  deficiency.  The  flow 
rate  of  the  "under- fire  air"  controls  the  amount  of  available  air  in  the  chamber.  In  this  operation, 
adding  more  air  increases  combustion  rate,  while  removing  air  decreases  combustion  rate.  This 
is  based  on  the  assumption  that  combustion  rate  is  proportional  to  the  amount  of  available 
oxygen.  An  analyzer  whose  probe  is  placed  in  the  entrance  to  the  third  chamber  monitors  the 
level  of  oxygen,  or  combustibles.  Temperature  variation  has  an  important  effect  on  the  rate  of 
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combustion,  strongly  influencing  the  decomposition  rate  and  sometimes  even  changing  how 
decomposition  is  performed  and  producing  different  byproducts  of  incomplete  combustion.  In 
bulk,  stationary  solids,  there  are  wide  local  temperature  gradients.  They  cannot  be  controlled 
because  heat  generation  and  exchange  is  governed  by  local  physical-chemical  processes.  There 
is  no  access  parameter  for  combustion  control  except  the  global,  external  parameters  like  air  flow 
rate  and  chamber  temperature.  Thus,  combustion  can  become  uncontrollable. 


Figure  7 Solid  Waste  Control 

When  the  temperature  exceeds  the  setpoint  by  a preset  value,  the  amount  of  "under-fire 
air"  available  for  combustion  is  regulated  for  further  control  and  air  is  replaced  with  steam.  This 
transition  is  governed  by  safety  limits.  Two  safety  limits  are  involved  in  monitoring  "run-out 
conditions",  HL-high  limit  and  HH-high,  high  limit.  When  the  chamber  temperature  exceeds  the 
HL  safety  limits,  steam  is  injected  into  the  chamber.  A P-controller  using  pulse  width 
modulation  controls  the  injection  rate.  The  proportional  rate  is  set  such  that  at  the  HH 
temperature  level,  duty  cycle  reaches  100%.  The  formula  used  is 
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At  = — ' ; if  current  temperature  T ^ 7^^  otherwise  At  = 0 

The  above  control  strategy  has  been  tested.  It  did  not  provide  sufficient  control  during 
the  transitional  period,  which  occurs  after  placing  a new  load  in  the  chamber.  Loading  of  solids 
cools  the  chamber.  Upon  closure  of  the  loading  doors,  the  control  system  activates  the  burner 
to  keep  the  temperature  at  the  setpoint  level.  After  some  delay,  solid  waste  is  ignited,  resulting 
in  rapid  combustion  and  an  overshoot  in  the  temperature.  Because  of  the  speed  of  the  ignition 
process  and  air  leaks  to  the  chamber,  it  is  difficult  to  keep  the  oxygen  deficiency  at  a constant 
level.  A delay  in  the  temperature  controller  activation  is  a partially  successful  solution  to  the 
problem.  A controller,  using  the  combustion  model  as  the  reference  to  derive  the  controller 
action,  would  be  more  appropriate.  Further  examination  of  this  area  should  achieve  better  control 
of  the  process. 

The  effect  of  an  air  flow  on  combustion  is  two-fold:  on  one  hand,  it  provides  more 
oxygen  and  thus  increases  the  combustion  rate;  and  on  the  other  hand,  it  cools  the  waste  material, 
thus  decreasing  the  combustion  rate.  At  some  flow  rates,  these  two  competing  influences 
balance,  resulting  in  combustion  curves  with  maximums  as  illustrated  in  Figure  8. 


Figure  8 


Chamber  Temperature  as  Function  of  Air  Flow 
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There  is  an  inherent  difficulty  in  the  combustion  process  control,  achieved  by  regulating 
air  available  for  combustion,  evident  from  the  shape  of  the  curve  in  Figure  8.  As  the  operating 
point  moves  from  the  left  to  the  right  of  the  maximum,  the  differential  gain  of  the  loop  changes 
not  only  value  but  also  sign.  Negative  feedback  becomes  positive,  making  the  loop  unstable. 
This  situation  can  produce  another  kind  of  run-off  condition  - cooling-off  caused  by  excessive 
air  flow.  This  may  happen  temporarily  because  of  the  slow  response  of  the  oxygen  analyzer 
loop.  Upon  detection  of  excess  air,  the  oxygen  control  loop  reduces  air  flow  rate  to  the  left  of 
the  maximum.  In  addition,  note  that  the  actual  "work  curve"  of  temperature  vs  air  flow  rate  is 
fundamentally  modified  by  the  control  action  of  the  temperature  controller  changing  the  bum  rate 
of  the  gas.  The  temperature  drop  is  offset  by  an  increase  in  gas  flow. 

Excessive  air  flow  rates  cause  particles  of  ash  and  incompletely  burned  solid  matter  to 
rise  and  be  carried  out  of  the  chamber,  which  is  not  a desired  result. 

4.7  Pressure  Control 

Before  flue  gas  is  exhausted  to  the  air,  it  is  scmbbed  in  venturi  and  packed  column 
scrubbers,  cleaned  in  a carbon  adsorber  and  then  reheated.  To  overcome  the  flow  obstmctions 
of  these  devices  and  maintain  a negative  pressure  in  the  incinerator  chambers,  two  fans  suck  in 
the  air  and  push  it  through  ducts.  The  pressure  control  loops  maintain  a proper  level  of  pressures 
in  the  incineration  chambers,  ducts  and  carbon  adsorber.  Excess  vacuum  may  cause  ducts  to 
collapse;  under  positive  pressure  incineration  products  escape  to  the  inside  of  the  incinerator 
building.  The  control  loops  are  shown  in  Figure  9. 

There  are  three  independent  loops.  The  first  loop  controls  differential  pressure  in  the 
incinerator  chambers,  the  second  maintains  the  proper  pressure  level  in  ducts  and  the  third 
controls  pressure  drop  across  the  venturi  in  the  wet  scmbber.  These  loops  are  strongly  coupled. 
A valve  regulates  the  pressure  drop  across  the  venturi  which  affects  the  scmbbing  performance. 
The  PID  loop  maintains  this  pressure  drop  at  a constant  set-point  level.  There  is  a strong 
interaction  between  this  loop  and  the  first  fan  control  loop;  more  design  effort  is  required  to 
further  improve  control  quality.  When  required,  the  wet  scmbber  loop  can  be  set  to  manual 
mode.  A more  sophisticated  control  scheme  may  be  considered  in  the  future  to  improve  control 
quality.  Currently  the  two  fan  loops’  interaction  is  minimized  by  a time  scale  separation;  the  first 
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fan  control  loop  operates  quickly,  the  second  slowly.  This  arrangement  matches  the  natural 
dynamics  of  the  subsystems. 


Figure  9 Pressure  Control  in  Incinerator  Chambers  and  Ducts 


4.8  pH  Control 

The  two  collector  tanks  for  the  venturi  and  packed  column  scrubbers  require  that  pH  be 
maintained  within  operating  limits.  The  requirements  are  not  very  strict;  two  stand-alone  PID 
control  loops  achieve  this  task.  These  controllers  are  not  connected  to  the  computer  and  their 
set  points  are  manually  adjusted  at  the  instrumentation  cabinet.  pH  values  are  available  as  analog 
inputs  to  the  computer.  The  lack  of  remote  setpoint  control  of  pH  controllers  results  from  the 
fact  that  pH  values  need  not  be  changed  often  and  the  extra  cost  is  not  justified.  Appendix  "F" 
shows  control  arrangements  in  more  detail. 

5 SAFETY  INTERLOCKS 

Numerous  interlocks  improve  operational  safety  and  also  protect  staff  and  equipment  in 
the  event  of  equipment  malfunction  or  human  error.  The  basic  interlocks  are  at  the  device  level 
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and  they  are  used  to  ensure  the  proper  operation  of  devices.  For  example,  consider  Burner  1 
(Liquid  Chamber):  the  following  conditions  must  be  satisfied  to  ignite  this  burner: 

- power  on,  air  supply  available,  pilot  flame  on,  guillotine  door  up,  temperature  in  the 

chamber  below  high  safety  limit,  gas  pressure  above  low  limit,  etc. 

These  single  device  level  interlocks  then  become  the  building  blocks  of  a more  complex, 
total  system  interlock  logic.  This  logic  ensures  that  the  plant  equipment  is  brought  on  line  in  the 
proper  sequence.  For  example,  the  by  pass  valve  cannot  be  activated  if  both  fans  are  not 
working,  duct  pressures  are  not  within  the  right  range,  the  wet  scrubber  is  not  in  operation,  and 
so  on.  Bash  Pandompatam  specified  the  interlocking  system,  shown  in  Figure  10a. 

Typically,  the  operation  sequence  of  the  Pilot-Scale  Incinerator  involves  plant  start-up, 
normal  operation  and  shut-down.  Start-up  and  shut-down  are  transitory  in  nature  and  during 
these  events  the  process  parameters  change  widely  until  they  reach  the  target  values,  while  the 
goal  of  the  normal  operation  is  to  keep  the  process  parameters  as  steady  as  possible.  Most  of 
the  interlocks  are  static  by  nature  and  are  valid  during  all  phases  of  the  plant  operation.  In 
general,  there  are  some  interlocking  requirements  that  are  valid  only  during  the  transitory  phases 
or  only  during  normal  operation.  Switching  logic  has  to  handle  all  cases.  To  complicate  matters 
further,  many  process  units  have  been  equipped  with  built-in  electromechanical  interlocks.  We 
decided  to  utilize  these  electromechanical  controls  in  the  total  plant  control  system  rather  than 
to  replace  them  with  an  "all  in  the  PLC"  implementation.  Such  solution  has  some  advantages: 

• Equipment  can  be  operated  from  local  panels. 

• Individual  units  can  be  operated  without  the  PLC,  which  was  important  during 
plant  construction  and  remains  so  during  maintenance. 

• Cost  of  the  PLC  hardware  would  have  approximately  doubled. 

• Extra  work  would  have  been  necessary  to  dismantle  panels,  rewire  sensors  to  the 
PLC  and  test  the  modified  logic. 

Figure  1 1 illustrates  a typical  technique  for  interfacing  relay  logic  with  the  control  panels 
of  the  PLC  computer.  One  contact  isolates  the  local  switch  and  the  second  controls  the  PLC 
ON/OFF  switch.  The  hand  switch  position  is  not  confirmed  but  a special  Local/PLC  selector 
switch,  readable  by  the  PLC,  enables/disables  activation  of  devices  for  the  local  panels.  This 
arrangement  provides  maintenance  convenience;  the  local  switches  are  not  used  during  normal 
operations.  Figure  12  shows  a portion  of  the  panel  interfacing. 


16 


: “ 2 8 = I 

i M 5?  ' 

= 5 t 3 * 

o o 2 “ 

o K ■'  w “ ; 

Hi  i 

naa  di  O 


t 41 


n 


li 


<><><><><?<><><><> 


ooooooooo 


Figure  10a  Safety  Interlocks  for  Incinerator  Control 


POWER  AND  EQUIPMENT  FAILURE 
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Figure  10b  Safety  Interlocks  for  Incinerator  Control 
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Figure  1 1 Interface  to  Panel  Switches  and  Sensors 

6 OPERATOR  INTERFACE 

6.1  Introduction 

The  incinerator  control  system  was  designed  to  separate  and  decouple,  as  much  as 
possible,  the  control  functions  from  the  operator  interface  functions.  Due  to  the  limited  reliability 
of  the  PC  computers,  both  in  hardware  and  particularly  in  operating  systems  and  application 
software,  we  decided  not  to  put  any  control  functions  on  the  PC  computers.  This  requirement 
could  be  eased  up  by  allowing  noncritical,  supervisory  type  control  functions  to  be  located  on 
the  PCs.  Brief  hang-ups  on  the  computer  would  still  allow  the  plant  to  run  safely  and  not 
necessitate  the  plant  being  shut  down. 

In  addition  to  providing  displays  of  the  plants’  operation,  the  process  computer  should 
have  the  ability  to  run  various  auxiliary  programs  which  augment  or  rearrange  information 
required  by  scientists  involved  in  experiments.  A Concurrent  DOS  based  system  allowed  us  to 
achieve  these  goals  without  resorting  to  solutions  that  provide  uniquely  customized,  real  time 
DOS  extensions  that  are  not  portable  between  vendors.  Currently,  more  options  are  available, 
particularly  control  interfaces  based  on  OS/2  operating  systems,  that  more  readily  achieve  these 
goals. 
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Figure  12  PLC  - Panel  Interface  Logic 
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The  ladder  diagrams,  operator  interfaces,  and  plant  construction  were  implemented 
concurrently.  Thus,  implementation  proceeded  in  a bottom-up  fashion,  even  though  the  overall 
design  was  top-down.  In  the  first  stage,  a maintenance  mode  version  of  the  ladder  diagrams  and 
operator  displays  was  implemented  on  a device  by  device  basis  as  hardware  was  being  installed 
in  the  plant.  This  version  allowed  operators  to  exercise  various  features  of  the  equipment,  with 
only  essential  interlocks  operating  for  the  protection  of  manually  operated  devices  and  ensure 
staff  safety.  Various  faults  were  introduced  to  the  control  blocks  under  test  by  placing  jumper 
wires  or  forcing  relays  in  the  PLC  to  a particular  state  to  test  for  proper  behaviour  of  the  logic 
circuitry.  Device  manipulation  was  controlled  from  the  associated  computer  screens  or  from  local 
panels.  Progressively  more  interlocks  and  display  logic  were  added  to  create  the  run  mode  lo^ic 
and  displays. 

6.2  Overview  of  Displays 

Screens  are  organized  in  various  functional  groups,  as  follows: 

- Start-up  and  overall  system  set-up  screens 

- Overall  plant  or  unit/area  process  displays 

- Information  on  interlocks 

- Controller  set-up  and  tuning  screens 

- Control  group  displays 

- Shut-down  displays 

- Help  screens  on  uses  of  PID’S  commands,  tags,  various  system  commands,  alarms  etc. 

Some  of  the  above  are  a part  of  the  ONSPEC™  software. 

Figures  13  and  14  show  the  ONSPEC™  screens  that  give  listings  of  displays  available 
to  the  operator. 

All  ONSPEC™  displays  were  designed  for  the  operators’  convenience  and  ease  of 
performing  tasks.  Not  all  desired  features  were  implemented;  for  example,  it  was  not  possible 
to  include  a feature  enabling  the  plant  operator  to  go  directly  to  the  appropriate  screen  associated 
with  a given  alarm  to  view  the  process  display  before  acknowledging  the  alarm.  Other  ideas 
were  not  as  useful  as  they  initially  appeared;  such  as,  a "model"  set-up  screen,  which  is  described 
in  more  detail  later.  The  lack  of  effective  batch  ramping  features  of  ONSPEC™  software  limited 
the  usefulness  of  these  pre-configured  process  set-ups. 
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Figure  13  Screen  1:  MENU  1,  Displays  1-40 

The  operator  Interface  System  consists  of  two  networked  PCs  that  are  functionally 
specialised:  one  of  these  is  for  the  process  control  and  the  other  is  for  data  analysis  and 

monitoring  of  experimental  progress.  There  are  screen  variations  available  on  these  computers. 
Operator  interface  screens  available  on  the  control  computer  and  their  use  during  routine  runs  are 
described  later. 


6.3  Communication 

As  mentioned  above,  the  current  system  consists  of  two  PCs  interconnected  by  ARC-NET. 
In  addition,  four  remote  terminals  can  be  connected  via  serial  lines  to  access  the  ONSPEC™ 
screens  and  data.  This  arrangement  provides  physical  separation  of  plant  operators  monitoring 
equipment,  from  scientists  conducting  experiments,  performing  on-line  monitoring,  or  analyzing 
experimental  data.  Staff  interested  in  an  experiment  can  access  data  through  remote  consoles. 

Additionally,  ONSPEC™  communicates  with  the  Westinghouse  and  TI  (MACSYM 
replacement)  PLCs.  The  refresh  rate  of  screens  is  approximately  5 seconds.  This  matches  the 
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Figure  14  Screen  40:  MENU  2,  Displays  41-96 


rate  at  which  ONSPEC™  interrogates  PLCs  to  update  the  data  base.  There  are  two  types  of  data 
points:  one  type  is  always  being  requested,  independent  of  the  currently  invoked  screen;  the 
other  type  is  requested  from  the  PLCs  only  when  required  for  the  currently  activated  screen. 
When  a data  point  is  placed  on  a receive  queue,  it  is  first  compared  with  the  currently  stored 
value.  If  it  has  the  same  value,  the  point  is  removed  from  the  queue;  otherwise,  it  is  processed 
by  checking  for  alarm  conditions,  clamp  limits  etc.  An  example  of  data  requested  on  demand 
is  the  controller  tuning  display  (see  screen  75;  Figure  23).  Tuning  parameters  are  needed  only 
when  an  operator  recalls  this  screen.  Normally,  these  parameters,  residing  in  the  PLCs  are  not 
required  by  ONSPEC™  and  therefore  do  not  need  to  be  transmitted  every  time  the  screen  is 
refreshed.  For  illustration  purposes,  fragments  of  a PLC  communication  configuration  file  are 
listed  below: 
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; CONTROL  BLOCK  FACEPLATES  GROUP  I 


7,B10 

HR1104 

EUR  511 

* 

Per  100 

1023  ; 

FClOl  SETPOINT  VALUE 

6, BIO 

HR1265 

EUR  513 

* 

Per  100 

1023  ; 

OUTPUT  VALUE  OF  CONTROLLER 

5,B10 

HR0032 

EUI  341 

; 

CONTR  OUTPUT  STATUS  WORD 

7, BIO 

HR1105 

EUR  514 

* 

Per  100 

1023  ; 

FC103  SETPOINT  VALUE 

6, BIO 

HR1266 

EUR  516 

* 

Rev  100 

1023  ; 

reverse  action  OUTPUT  value 

5, BIO 

HR0064 

EUI  342 

5 

CONTR  OUTPUT  STATUS  WORD 

7, BIO 

HR1106 

EUR  517 

* 

Per  100 

1023  ; 

FC105  SETPOINT  VALUE 

6, BIO 

HR1267 

EUR  519 

* 

Per  100 

1023  ; 

OUTPUT  VALUE  OF  CONTROLLER 

5, BIO 

HR0096 

EUI  343 

; 

CONTR  OUTPUT  STATUS  WORD 

7, BIO 

HR1107 

EUR  520 

* 

Per  100 

1023  ; 

FC107  SETPOINT  VALUE 

7, BIO 

HR0621 

EUR  623 

* 

Per  100 

1023  ; 

FC107  CONDITIONED  SETPOINT 

6,B10 

HR1268 

EUR  522 

* 

Per  100 

1023  ; 

OUTPUT  VALUE  OF  CONTROLLER 

5, BIO 

HR0128 

EUI  344 

CONTR  OUTPUT  STATUS  WORD 

7,B10 

HR1116 

EUR  547 

* 

Temp  50 

1023  ; 

TCI  10  SETPOINT  VALUE 

6,B10 

HR1252 

EUR  549 

* 

Per  100 

1023  ; 

OUTPUT  VALUE  OF  CONTROLLER 

5, BIO 

HR0416 

EUI  353 

5 

CONTR  OUTPUT  STATUS  WORD 

7, BIO 

HR1119 

EUR  556 

* 

Per  100 

1023  ; 

OC113  SETPOINT  VALUE 

6, BIO 

HR1255 

EUR  558 

H! 

Per  100 

1023  ; 

OUTPUT  VALUE  OF  CONTROLLER 

5, BIO 

HR0512 

EUI  356 

5 

CONTR  OUTPUT  STATUS  WORD 

A typical  line  of  this  configuration  file  describes  with  which  screen,  data  is  to  be 
associated,  how  often  it  is  to  be  requested,  what  conversion  functions  are  to  be  applied,  and  if 
a particular  data  point  is  to  be  sent  or  received. 

Every  communication  link  is  monitored  by  an  associated  watchdog  program.  The  status 
of  the  link  is  crucial  for  data  correctness  on  the  screen;  therefore  the  status  is  displayed  on  every 
screen  together  with  the  operating  status  of  the  PLC.  During  initial  stages  of  implementation, 
when  the  system  was  not  optimised  for  communication  efficiency  and  the  hardware  was  slow, 
there  were  problems  of  overloading  communications  queues  thus,  we  implemented  a feature  to 
monitor  for  this  overloading.  This  feature  was  used  during  the  initial  stages  and  is  now  switched 
off  during  normal  runs. 
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6.4  Start-up  and  Overall  System  Sei-up  Screens 

After  checking  communication  status  between  controls  system  hardware,  the  operator 
selects  a mode  of  operation:  liquid  or  solid  waste.  This  selection  enables  or  disables  various 
sections  of  the  PLC  ladder  diagrams  and  chooses  the  required  controllers.  The  switching  on  of 
devices  is  usually  performed  from  screen  42,  shown  in  Figure  15. 
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Figure  15  Screen  42:  On/Off  Switches  and  Their  CR  Outputs 


Toggling  the  on/off  status  on  the  screen  causes  activation  of  the  relay  responsible  for  the 
starting  of  the  corresponding  device.  There  is  an  overview  screen  that  shows  a summary  of  start- 
up set-ups  of  control  blocks  (not  shown  here).  Burners,  scrubber  and  carbon  filter  sections 
started  from  dedicated  screens  17  and  18  shown  in  Figure  16  and  Figure  17. 
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Figure  16  Screen  17:  Liquid  Burner  Start-up 

With  each  screen  are  a few  associated  screens  that  can  be  accessed  directly  by  pressing 
the  corresponding  function  button.  Available  choices  are  shown  at  the  top  of  the  screen  so  the 
operator  does  not  have  to  remember  display  numbers  or  go  to  an  auxiliary  screen  to  find  one. 
In  many  cases,  the  basic  control  actions  are  assigned  to  the  function  keys  so  there  is  no  need  for 
the  operator  to  tab  to  the  proper  display  field  to  change  one. 
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Figure  17  Screen  18:  Scrubber  and  CAD  (Carbon  Adsorber)  Start-up 

The  start-up  process  is  manual.  Gradual  heating  of  chambers  requires  flexible  set-up  for 
ramping  of  temperatures,  a feature  not  currently  provided  by  the  system  ( it  would  require  an 
extensive  programming  effort).  For  the  ''single  button"  capability  to  start-up  or  shut-down  the 
plant,  a ramping  feature  would  be  required  to  work  with  the  operating  "model  set-up' 


screens. 


6.5  Qverail  Plant  or  Unit/ Area  Process  Displays 

Another  class  of  displays  has  been  designed  to  provide  a comprehensive  view  of  the  plant 
status  during  normal  operation.  Screen  24  (Figure  18)  shows  the  display  presenting  the  plant 
overview.  Graphic  symbols  represent  major  areas  of  the  plant  and  text  indicates  equipment  status 
and  important  process  values. 
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Figure  18  Screen  24:  Plant  Overview  - Liquid  Mode 
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For  more  detailed  information,  an  operator  can  switch  to  various  plant  area  displays. 
Screen  26  (Figure  19)  is  an  example  of  the  plant  area  display,  in  this  case,  incinerator  burners. 
Similar  screens  display  the  carbon  adsorber  area  (Figure  20,  screen  28)  etc. 
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Figure  19  Screen  26:  Incinerator 
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Readings  of  various  analyzers  are  summarized 


on  a separate  screen,  with  additional 


screens  to  enter  conversion  coefficients.  See  Figure  20,  screen  61  below. 
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Figure  20  Screen  61:  Analyser  Readings 

Substantial  efforts  have  achieved  automated  readings  from  analyzers.  In  many  cases, 
special  circuitry  added  to  the  instrument  enables  the  computer  to  read  the  position  of  the  panel 
range  switches.  The  initial  concept  requiring  the  operator  to  enter  scaling  factors  when  switching 
ranges  did  not  work  because  of  inconvenience  and  uncertainty  with  the  correctness  of  computer 
readouts. 
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6.6  Information  on  Interlocks 

During  startup  and  normal  operation  some  interlocks  may  be  triggered.  These  interlocks 
might  shut-down  some  equipment  or  might  not  allow  some  other  devices  to  be  activated.  Active 
interlocks  generate  alarm  messages,  but  this  information  is  often  not  sufficient  to  help  an  operator 
restart  the  plant.  To  aid  an  operator  in  identifying  reasons  for  the  interlock  activation,  several 
screens  have  been  designed  to  show  the  status  of  contacts  leading  to  the  relay  trigger.  An 
example  of  such  a screen  is  shown  below  in  Figure  21. 
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Figure  21  Screen  30:  PLC  Interlock  - Burners 


In  this  example,  screen  30  displays  the  status  of  the  logic  required  to  bring  burners  1,  2 
and  3 into  a ready  state.  Symbols  of  contacts  change  shape  according  to  their  state  (opened  or 
closed).  The  operator  can  thus  determine  the  condition  that  caused  the  interlock  to  activate. 

Alternatively,  in  more  difficult  cases,  a qualified  engineer  can  interrogate  the  status  of 
the  relays  of  the  PLC,  or,  for  diagnostic  purposes,  force  a contact  change  by  using  the  PLC 
program  loader,  which  communicates  with  the  PLC  on  a second  channel  concurrently  with  the 
ONSPEC™  software.  This  method  has  been  used  occasionally,  especially  during  plant 
commissioning  and  stanup. 
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The  described  displays  show  only  the  current  logic  state.  To  trace  switching  sequences 
leading  to  the  interlock  trip,  the  operator  can  build  a trend  display  and  select  tags  of  interest  for 
trending.  There  is  no  comprehensive  automatic  diagnostic  with  trace  capabilities  built  into  the 
system  because  the  effort  was  not  warranted. 

6.7  Control  Group  Displays 

During  start-up,  some  control  loops  must  be  set  to  manual  mode.  A good  example  is  the 
oxygen  control  loop.  The  oxygen  probe  must  be  heated  to  operating  temperature  before  readings 
become  meaningful,  thus,  the  automatic  control  up  to  this  point  must  be  disabled.  To  help  the 
operator  switch  controls  to  iocal/remote  or  manual/ automatic , the  controls  have  been  collected 
into  groups.  Figure  22,  screen  10,  shown  below,  displays  a typical  layout  of  such  a control 
group. 
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Figure  22  Screen  10;  Control  Block,  Group  1 
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In  addition,  input  and  output  tracking  automates,  as  much  as  possible,  switching  of 
controllers  between  local  and  cascade  mode  of  operations. 

6.8  Controller  Setup  and  Tuning  Screens 

Every  controller  in  the  PLC  has  a corresponding  tuning  screen  in  the  ONSPEC™  enabling 
various  controller  parameters  to  be  set.  A typical  arrangement  is  shown  in  Figure  23,  screen  75 
below. 


Figure  23  Screen  75:  Tuning  Loop  for  FC114  Controller 

The  screen  has  been  divided  into  3 functional  regions.  On  the  left  side,  configurable 
parameters  are  listed  with  corresponding  values.  The  operator  moves  the  cursor  to  an  appropriate 
field  and  modifies  its  value.  The  centre  is  dedicated  to  trend  display  and  serves  as  an  aid  in 
visualisation  of  the  control  loop  performance.  On  the  right,  a controller  faceplate  that  displays 
control  values  and  status  indicators,  is  used  for  manipulation. 
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6.9  Shut-Down  Display 

The  shut-down  screen,  shown  in  Figure  24  helps  the  operator  with  shut-down.  This  check 
list  is  useful  for  shutting  the  plant  down  in  an  orderly  way. 
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Figure  24  Screen  29:  Shut-Down  Menu 

A one-button-initiated  sequence  to  shut-down  the  plant  was  not  workable,  and  was 
abandoned.  This  feature  was  similar  in  concept  to  the  automatic  start-up  of  the  plant  capability 
and  required  implementation  of  the  "ramping  feature".  This  feature  would  have  allowed  the 
operator  to  set  a pre-programmed  control  of  gradual  cooling  of  the  chambers  with  rates 
conforming  to  the  cooling  rates  designated  for  our  refractory. 
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6.10  Help  Screens 

In  addition  to  the  standard  ONSPEC™  and  concurrent  DOS  online  help,  a series  of 
additional  help  screens  provide  on  line  help  on  the  use  of  PIDs,  commands,  tags,  various  system 
commands,  alarms  etc.  A good  example  of  such  a screen  is  screen  95,  shown  below. 
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Figure  25  Screen  95:  Command  Summary 

This  sample  screen  illustrates  well  the  technique  that  helps  an  operator  with  system 
commands.  The  screen  area  has  been  divided  into  several  regions,  each  associated  with  a 
different  class  of  commands.  The  bottom  section  of  this  screen  shows  how  certain  ONSPEC™ 
commands  are  built.  In  the  upper  part  is  a description  of  selected  system  commands  organized 
into  groups. 

Other  help  screens  are  built  in  similar  ways  by  grouping  related  information  in  one  region. 
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7 CONCLUDING  REMARKS 

In  February  1993,  installation  of  the  additional  incineration  chamber,  identified  as 
chamber  #4,  was  completed.  The  control  and  data  acquisition  system  underwent  substantial 
changes  to  accommodate  this  addition,  even  though  the  structure  of  individual  control  loops  was 
merely  a copy  of  the  existing  arrangements  for  chamber  #3.  This  situation  arose  from  the  lack 
of  available  analog  channels  and  free  slots  in  the  Westinghouse  PLC.  We  incorporated  the 
expansion  by  using  the  recently  added  TI  545  PLC  (MACSYM  replacement). 

The  combination  of  the  PLC  based  control  system  with  an  IBM-PC  based  operator 
interface  has  proven  to  be  a reliable  and  cost  effective  solution  to  pilot-scale  plants  like  the 
Research  Incineration  Facility  at  AFC.  Real  time  control  applications,  built  on  top  of  operating 
systems  like  OS/2  or  even  MS  Windows  or  Windows  NT,  will  help  overcome  the  limitations  of 
DOS  and  will  provide  easy,  vendor  independent,  interprogram  data  exchange  using  DDE 
(Dynamic  Data  Exchange)  or  OLE  (Object  Linking  and  Embedding)  functions.  This  is  especially 
important  in  a research  environment,  where  funds  are  decreasing  and  requirements  remain 
extremely  varied. 
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8 APPENDICES 

A.  Air/Fuel  ratio  control  - chamber  #1 

B.  Air/Gas  ratio  control  - chamber  #2 

C.  Air/Gas  ratio  control  - chamber  #3 

D.  Air/Gas  ratio  control  - chamber  #4 

E.  Air  control  select  - chamber  #3/chamber  #4 

F.  Incinerator  Venturi  tank  pH  control 


RATIO  AIRXFUEL  - WASTE  BUR.  NO. 
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APPENDIX  A:  AIR/FUEL  RATIO  CONTROL  - CHAMBER  #1 


AIR-GAS  RATIO  & 02  CONTROL  CHAMBER  NO . 2 SOLID  MODE  (ANTI -SMOKE) 
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APPENDIX  B:  AIR/GAS  RATIO  CONTROL  - CHAMBER  #2 
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APPENDIX  C:  AIR/GAS  RATIO  CONTROL  - CHAMBER  #3 


AIR-GAS  RATIO  CHAMBER  NO. 
(ANT  I -SMOKE  ) 
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APPENDIX  D:  AIR/GAS  RATIO  CONTROL  - CHAMBER  #4 
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APPENDIX  E:  AIR  CONTROL  SELECT  - CHAMBER  #3/CHAMBER  #4 


IRB  VENTURI  TANK  AND  COLUMN  TANK  pH  CONTROL. 
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APPENDIX  F:  INCINERATOR  VENTURI  TANK  pH  CONTROL 


